Finance · Consumers · Emerging
Dependence on a single device (phone) for authentication and financial transactions creates vulnerability if the device is lost
Losing a phone leads to inability to perform essential tasks like purchasing tickets, accessing funds, or communicating.
Who experiences it: Consumers
Momentum
0%
Pain
85
Competition
90
Opportunity
65/100
Signals over time
2 observed signals across 1 sources, tracked for 2 days. Confidence: low.
What people are saying Observed
“Just wait for real life hacking to be a thing. With someone's phone these days, if the person is sedated and handcuffed they can't report they've lost access to the phone - a criminal gang could sit there for 24 hours or more with any number of ways to drain off a few thousand from that persons bank account, convert credit into bitcoins ... whatever else ... sadly security has been pushed to passkeys, smart phones and other devices that a person inclined to adopt such things are left wide open. Presently such a thing seems inconceivable, but right tools and the right plan ... and I've left some important things out, no need to give idiots ideas, and soon ... we'll gladly submit to constant A.I. surveillance to monitor where we are at all times. https://xkcd.com/538/”
Hacker News · complaint
“Passkeys work because you always have the hardware for them. Suppose I had only passkeys and Google Pay. I take a train into town and lose my phone. What then? I'm screwed. I couldn't just go home because I'd need to buy a ticket or taxi using my phone. I couldn't buy a replacement phone. I wouldn't be able to online shop on a library computer or withdraw money unless I have a physical bank branch. (I do not.) I can't even contact anyone unless I know their number and borrow a phone or find a way to send an email. My preferred balance of risk vs convenience is: passwords in a password manager, hardware-based 2FA only for making account changes, and confirmation emails (My email password is not in my password vault.) any time a site successfully or unsuccessfully processes a login attempt. There is no hardware element. If someone phishes my password, I'll know right away from the login email, unless they're so talented or lucky that they also accessed my email or found a way to spoof my 2FA. If I lose my phone, I'm not totally helpless. I don't see an overall downside to my strategy that isn't worse than passkeys. ----- Edit: On”
Hacker News · complaint
Why now? AI inference
Existing solutions Observed
- Google Authenticator · Free · complaints: No backup or recovery options if the device is lost, Limited features compared to other authentication apps, User interface can be confusing for some
- Authy · Free with premium features available · complaints: Occasional syncing issues between devices, Some users report delays in receiving codes, Limited support for certain services
- LastPass Authenticator · Free with premium features available · complaints: Some features require LastPass subscription, Occasional bugs reported by users, Limited support for certain services
- Duo Security · Varies by plan, starting at $3/user/month · complaints: Can be complex to set up for non-technical users, Pricing can be high for small businesses, Some users report issues with app performance
- Microsoft Authenticator · Free · complaints: Limited features compared to competitors, Some users report issues with notifications, Can be confusing for non-Microsoft users
There is a clear need for an authentication solution that offers robust multi-device support, seamless backup and recovery options, and a user-friendly interface, while also addressing the vulnerabilities associated with dependence on a single device. Current competitors either lack comprehensive recovery options or experience syncing issues, leaving consumers exposed if their primary device is lost.
See the full evidence, competitor gap matrix and opportunity report.
Free account. No credit card.